IPsec (Internet Protocol Security) is a protocol for securing IP communications by authenticating and encrypting each IP packet of a communication session.

learn more… | top users | synonyms

1
vote
0answers
18 views

Issues with enpoint mapper service

In short, we have a VPN server and an AD server. The VPN server is our connection to a remote AD server. From the VPN server, I can use port query to verify that port 135 is not filtered and it ...
1
vote
0answers
619 views

Partial VPN connections on Cisco ASA

Cisco ASA 5505 in remote site, connecting as Easy VPN client to ASA 5510 at HQ. VPN light is green, and sh crypto isakmp sa shows active security association. However connectivity to some of our ...
1
vote
0answers
72 views

Is there a way to have VPNC failover automatically to a second Cisco firewall?

I'm currently using VPNC on my Ubuntu machine to VPN to a remote Cisco firelwall. It's critical for this VPN connection to be up at all time. Is there a way to have VPNC failover automatically to a ...
1
vote
0answers
367 views

Cisco with site-to-site and EzVPN - configuration Issue

This is the first time for me to work with Cisco Router. The below mentioned is my configuration where Cisco Srv is Cisco 7200 Series Router XYZ is one VPN Server running on Linux. RAC is ...
1
vote
0answers
292 views

Cisco RV220W ipsec with wrong ip packets

I just setted up a IPSEC lan to lan ipsec connection and since our local ip ranges colide with the remote network, I setted the local ip in the VPN police to be our external wan ip. The vpn tunnel is ...
1
vote
0answers
333 views

SMB over IPSec prompting for credentials

I am trying to connect our web server to customers SQL/file server through a VPN tunnel. Originally we had setup a PPTP VPN and I was able to access their file shares without issue. Since PPTP ...
1
vote
0answers
3k views

Cisco ASA - Duplicate ISAKMP SA - REKEYs

I have an issue with IPSEC VPNs where a single endpoint generates multiple ISAKMP SAs. (in my examples I have replaced the IPs - 1.1.1.1 is the remote endpoint, 10.10.10.10 is an object on the remote ...
1
vote
0answers
1k views

IPSec VPN login failing with certificate authentication

I am working on an IPSec VPN solution allowing iPhones / iPads to connect to a Linux server running Gentoo. I have been able to get the VPN functioning as expected using PSK authentication (PSK + ...
1
vote
0answers
407 views

ipsec tunnel connectivity issue

I trying to connect Solaris 10 box to Cisco PIX with IPsec tunnel. And it seem halt at some point. And from the post @ http://www.mail-archive.com/networking-discuss@opensolaris.org/msg07573.html ...
1
vote
0answers
2k views

Openswan Ubuntu Malformed Packet

I'm trying to create an IPSec encrypted VPN tunnel to a Cisco ASA 5540 from a ubuntu server using openswan. I've set up VPN connections before to Cisco routers, so this task didn't seem like it would ...
1
vote
0answers
545 views

How to allow RDP through IPSEC using netsh advfirewall command

I have an offsite windows server 2008 R2 server. And an ipsec tunnel set on our router here plus a connection security rule in Advanced Firewall on the server. I have ssh access to the console on the ...
1
vote
0answers
257 views

Trouble connecting my server to a firefwall trough VPN

I have a server running Ubuntu and Openswan, but I'm not able to connect to the remote firewall. I hope that anybody can help me. My ipsec.conf-file is as follows: config setup protostack=netkey ...
1
vote
0answers
503 views

IPsec tunnels between Linux and Solaris

I have a Solaris machine sitting out in the ether somewhere that I would like to make part of my network via IPsec. I have this working between Solaris machines but not between Solaris and Linux. I ...
1
vote
0answers
146 views

Windows IPSec Filter Sanity Check

I'm installing NSClient++ so our Nagios system can monitor some windows servers using NRPE. I need to punch a hole in our IPSec policy to allow inbound connections on port 5666 from the Nagios server. ...
1
vote
0answers
911 views

StrongSwan - Windows 7 0 IPSec IKEv2 connection problems

I am trying to configure a roadwarrior scenario between a linux box with StrongSwan and a Windows Box with Agile VPN. I successfully configured my StrongSwan and my Windows box to connect. The Windows ...
0
votes
0answers
26 views

Site-to site Configuration between OpenSwan and Cisco ASA

I am making site-to-site vpn connection using amazon ec2 linux and cisco asa router ( please note i donot have access to router only configuration is provided.) CISCO ASA CONFIGURATION : ...
0
votes
0answers
18 views

racoon Road Warrior VPN Client - Tunnel Established but no ping

I'm trying to configure a road warrior VPN client on a Linux distribution. Here my configuraiton : Client VPN LINUX - 1.1.1.1 - INTERNET - 2.2.2.2 - FireWall - 10.0.0.0/8 I wish to create a tunnel ...
0
votes
0answers
35 views

IPSec site to site VPN

I am trying to connect our server to cisco site-to-site IPSec VPN with one of our partners servers, they asked us to implement the settings they gave us into our router, but actually we don't have ...
0
votes
0answers
23 views

IPSEC for RDP Connections

I am stuck with a wired problem, I am trying to achieve a functionality in which if a certificate is not installed on a system that system won't able to remote desktop the server, he won't even see ...
0
votes
0answers
30 views

openswan initiating from wrong IP, but answers with the right one

I'm running a Debian 7.8 openswan 1:2.6.37-3+deb7u1 server with one external interface, but many different aliases : inet xxx.xxx.xxx.94/24 brd xxx.xxx.xxx.255 scope global eth1 inet ...
0
votes
0answers
13 views

strongSwan on Angstrom

My problem is to establish a VPN tunnel between cRIO 9068 and a Cisco router. To accomplish this task I was planning to install strongswan on cRIO (opkg install strongswan). I have installed it on ...
0
votes
0answers
51 views

subnet-to-subnet libreswan ipsec vpn

I'm configuring a "subnet to subnet VPN" between two Centos 7 server using libreswan. Each server has two nic as showed in the following image. I would allow secure communication between the subnets ...
0
votes
0answers
45 views

iptables DNAT packets into an openswan IPSEC tunnel

I have the following network setup: +-----------------------------------+ | | ...
0
votes
0answers
21 views

Changing default encryption for OS X IPSec Client

We have two MacBooks -- one with Yosemite (10.10.2) and one with OS X Lion. IPSec to the office works from one but not from the other and the root cause seems to be that Yosemite uses AES as the ...
0
votes
0answers
51 views

Strongswan transport mode ipsec within subnet

Is there any way to configure strongswan to automatically start encryption to a given subnet rather than specific host? For example, if I know that my hosts at w.x.y.z/28 will be have the same PSK ...
0
votes
0answers
154 views

VyOS / Vyatta multiple CIDR blocks on one side of IPSec tunnel

I am attempting to link an AWS VPC to a datacenter using the community VyOS AMI and IPSec tunneling, talking to a SonicWall device that I don't control. I've been given the proper settings to ...
0
votes
0answers
37 views

Optimizing Pfsense IPSec VPN for a high latency environment

I have two PFsense routers connecting two networks with high latency between them. What can I adjust to improve file transfers between these two networks?
0
votes
0answers
91 views

Configuring OpenSwan for IKEv2 (via iOS8)

I'm trying to configure OpenSwan (running on Ubuntu) to accept connections from an iOS8 device. I receive the following logs, which seems to indicate the server denies IKEv2 connections (even though ...
0
votes
0answers
23 views

L2TP daemon server multiple IP

I have VPS with 3 public IP - Debian 7. I would like to have 3 L2TP damemons (one ip each) NATing traffic to each ip. Something like this l2tp_multiple_public_ip_diagram. I have set up l2tp daemon for ...
0
votes
0answers
17 views

Multihomed Windows 2003 IPsec tunnel source IP address

As Windows 2003 EOL comes near, I'm starting to disband old machines still active in my network. Now one of these is in a branch office and used as RRAS server just for servicing a VPN connection to ...
0
votes
0answers
101 views

MikroTik L2TP\IPsec along with IPsec tunnels

How to configure L2TP\IPsec whit IPsec working along? I have looked many tutorials, but none of them was explaining how to setup L2TP\IPsec while IPsec tunnels are running. L2TP\IPsec VPN will be used ...
0
votes
0answers
18 views

SQL 2012 IPSec or SSL

I have a requirement to secure connections to SQL server. (at transit that is) - TDE will be used for encryption at rest. SQL provides two options which are either certificate based SSL or Windows ...
0
votes
0answers
27 views

openswan - computing tunnel count?

When I do an /etc/init.d/ipsec status I see: pluto pid 10435 12 tunnels up some eroutes exist Question is how can I compute ahead of time how many tunnels will exist? I have one site-to-site that ...
0
votes
0answers
19 views

Racoon: inherit configurations

Starting to get acquainted with ipsec-tools and racoon, I'm wondering how stage 1 configuration inheritance works. With a sample configuration like this: remote "ParentConfig" { proposal { # ...
0
votes
0answers
125 views

Right way to set the MTU of an IPsec Client ( Linux/Racoon)

Here's the network topology : (PC1:IPsec Client)eth0---Internet CPE---((Internet))---Internet CPE---(PC2:IPsec Server) I've set up an IPsec Internet Gateway : PC1 sends all traffic, encrypted in an ...
0
votes
0answers
27 views

openswan ipsec tunel configuration

Its posible create ipsec tunel from SERVER1 to internal FTP. (i.e only for application on SERVER1) ? Network scheme: (private APP) (SERVER1 PUBLIC:1.1.1.1) ----------------------- ------- ...
0
votes
0answers
176 views

Cannot estabilish connection via VPN/L2TP to server

Hello system administrators! I would like to ask you a question, because I was looking at various internet tutorials for this, and nothing worked, so... I can't connect to server via VPN, it looks ...
0
votes
0answers
153 views

Windows RRAS server behind NAT to remote Fortigate via IPSec

I am about to deploy a Windows sever 2012 R2 RRAS server to connect to a FortiGate device via IPSec for site-2-site VPN. Phase 1 ending successfully, however, the Phase 2 failing, the Windows server ...
0
votes
0answers
250 views

Sonicwall GVC client failing on IKE phase 1 over LTE cell data connection

We're using Sonicwall's Global VPN Client to connect to our TZ210. It works fine over general WiFi, but not with the data connection on our on-call phone. When tethered via WiFi to the phone's ...
0
votes
0answers
138 views

(RouterOS) IPSec server can't find static policy on client connection

When trying to connect to server that have following settings: /ip ipsec peer> print 0 address=0.0.0.0/0 local-address=0.0.0.0 passive=yes port=500 auth-method=rsa-signature ...
0
votes
0answers
1k views

Mikrotik IPSec Tunnels not working after RouterOS upgrade

We upgraded our RB1100AH2x yesterday from 6.19 to 6.22 and lost our L2TP / IPSec tunnels in the process. The logs are now littered with IPSec errors stating failed to pre-process ph2 packet. In ...
0
votes
0answers
145 views

Connect Multiple Users Behind same NAT l2tp/IPsec

I have installed OpenSwan on CentOS 6, the clients connection to the server is successful and when i direct my browser to http://whatismyipaddress.com on the client it shows the public ip of the ...
0
votes
0answers
97 views

Openswan and Cisco ASA

i have post this same question on "Unix & Linux" but iv got no answer and will delete from there but ill try here too. I need this as soon as possible to solve it or at least to find out what is ...
0
votes
0answers
297 views

How to debug IPsec L2TP authentication failure (Ubuntu StrongSwan client to Windows Server 2012)

I'm trying to connect via IPsec L2TP to a Windows Server 2012 server. Both the clients and the host are behind a NAT. I can connect from a Windows 7 machine without any problems, but when trying to ...
0
votes
0answers
54 views

Route AAA LDAP traffic from ASA through IPSEC-tunnel to Windows DCs

We have one Cisco ASA 5505 in our HQ responsible for connect our remote office with a IPSEC-tunnel and one ASA 5505 at the remote office. The Cisco ASA 5505 in our HQ is also responsible for VPN users ...
0
votes
0answers
43 views

Reach non existing AWS VPC subnet from IPSec tunnel

So here is my setup: VPC: 172.16.0.0/16 Subnet 1: 172.16.1.0/24 openvpn server: eth0: 172.16.1.10 tun0: 172.17.0.1 ovpn client 1: 172.17.0.6 ovpn client 2: 172.17.0.10 IPSec VPN is using ...
0
votes
0answers
100 views

ClearOS OpenSwan to Linksys RV042 VPN not encapsulating packets

I have a big problem which prevents our IP Phones to be working properly for a week now; Our old DFL-210 fried during an electrical event. It was doing an IPSec VPN with our remote site via their ...
0
votes
0answers
91 views

How to configure strongswan to support iOS mobile devices?

I'm trying to configure strongswan server to support iPhones and iPads. I'm using client certificate for authentication, I have the following configuration for iOS in strongswan.conf : conn iOS ...
0
votes
0answers
80 views

Domain controller not allowing me to connect to it over IPSec tunnel

I'm trying to connect a Windows 7 computer to a domain controller over an IPSec tunnel. The tunnel has formed and the network is accessible. I have set the IPSec connection to use the windows domain ...
0
votes
0answers
46 views

Tagged traffic over Checkpoint IPSec

How can I forward tagged traffic over Checkpoint IPSec? Where I can read more info about it? I have Checkpoint R76 and I need to use tagged vlan over IPSec tunnel.